Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    13/10/2023, 16:57

General

  • Target

    a8ce6f7d34f80155c9565b43337cc33b9f83ec066e00b60fd3947f875f0fce4a.exe

  • Size

    5.3MB

  • MD5

    db7b6da9dbfba9b6edb1bc58305be67d

  • SHA1

    09f624b3e2076ec0d667261cbac84ff22f9f787b

  • SHA256

    a8ce6f7d34f80155c9565b43337cc33b9f83ec066e00b60fd3947f875f0fce4a

  • SHA512

    41a3bd4965c125a749b5e1e8fad0f6897e61f867e7d7bcf8f858699ac0829703d6701f85464e91a5654c48c3614e4960b23aa06f2cd7f06e424f0073a052614c

  • SSDEEP

    98304:nxrVIINZyBoI3D9FZBWzMIaFBdwlqNCG4wCosm42U0Qjh79h1/HdlEvJf1:weyBog1KyFB6ENCq/lU0e31vd8

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 25 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a8ce6f7d34f80155c9565b43337cc33b9f83ec066e00b60fd3947f875f0fce4a.exe
    "C:\Users\Admin\AppData\Local\Temp\a8ce6f7d34f80155c9565b43337cc33b9f83ec066e00b60fd3947f875f0fce4a.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1560

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1560-0-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/1560-1-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/1560-5-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/1560-7-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/1560-12-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/1560-14-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/1560-18-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/1560-22-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/1560-27-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/1560-29-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/1560-25-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/1560-20-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/1560-16-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/1560-10-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/1560-36-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/1560-40-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/1560-42-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/1560-44-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/1560-46-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/1560-38-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/1560-34-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/1560-32-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/1560-3-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/1560-2-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/1560-47-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB